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Six4Three, a Delaware limited liability 
company, 
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V. 

Facebook, Inc., a Delaware coiporation; 
Mark Zuckerberg, an individual; 
Christopher Cox, an individual; Javier 
Olivan, an individual; Samuel Lessin, an 
individual; Michael Vernal, an individual; 
Ilya Suldiar, an individual; and Does 1-50, 
inclusive. 
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I, Jack Russo, declare under penalty of perjury as follows: 

1, My name is Jack Russo, J am; managing partner of Gomiputerlaw Group LLP and 
counsel for third parties Theodore Kiamer and Thomas Scaramellrno. I am a member in good 
standing of the California State Bar and have been since I was admitted oyer thirty^five (35) 
years ago. I make the following statements based ori my personal knowledge, and I believe them 
to be tme. I could and would testify competently if calied as a witness. 

2. On April 12,20191 sent a letter to Joshua Leriier, Corrnsel for Defendant 
Eacebo ok. A tr ue and correct copy of this letter is attached as Exhibit 1. 


I declare under penalty of perjirry under the laws of the State of California that the 
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foregoing is true and correct and that this declaration was entered into on April 12,2019 in Palo 
Alto, California. 
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EXHIBIT 1 



COMPUTERLAW CxROTJP LL!’ 

ATTORNEYS AT LAW 

401 FLORENCE STREET 
I’alo Alto, Caiafoenia 94301 

COMPUTERLAW.COM 

Telephone Ea.y 

(650)327-9800 1650)618-1863 


April 12,2019 

Via Email 

Joshua Lerner, Esq. 

Durie Tangri LLP 
217 Leidesdorff Street 
San Francisco, CA 94111 
j 1 erner@duri etangri. co m 

Re: Six4Three. LLC v, Facebook, Inc, et al. 

San Mateo Super. Ct. Case No. CIV 533328 
Dear Mr. Lerner: 

Do you not see the irony in Facebook now claiming how “obvious” it is that Mr. Kramer, 
a layperson, was supposed to treat the U.K. Parliamentary Orders as though they could be readily 
ignored, while at the same time Facebook was given repeated notice but failed to take any legal 
steps against MP Collins or his DCMS Committee? Thinlc about it. Perhaps 20-20 “hindsight” 
is perfect, but Facebook could not sit on its hands nor refuse to fully disclose to the Court the 
actual electronic exchanges and other correspondence which it has had with Mr. Collins and/or 
his Committee and/or others in Parliament about any of this. The entire rationale of Section 16 
of the Protective Order puts squarely on Facebook the obligation to take steps following notice, 
and there is no dispute that multiple notices were given to Facebook before any disclosure took 
place, This is especially so because Facebook knows that neither Mr. Kramer nor 643 has the 
ability or financial resources to do so. As to the rest of your letter, we believe Mr. Kramer acted 
appropriately and in good faith in the face of a real threat to his freedom in London following 
service of the contempt notices on him because: 

1. It is a well-established that the power to punish contempt is not restricted to the 
Judiciary, and that administrative bodies such as the Senate have the power to punish contempt 
for their orders by direct imprisonment, criminal charges, or otherwise. Barenblatt v. U.S. , 360 
U.S. 109, (1959); see also In re Battelle . 207 Cal. 227, (1929). Given the many administrative 
investigations and/or proceedings currently pending against Facebook,' it is surprising that you 
appear to be arguing that Section 16 of the Stipulated Protective Order applies only to “a 
subpoena or a court order issued in other litigation.” If the Senate subpoenaed Facebook for these 
same documents, would Section 16 not apply in that circumstance either? Think about it. 

2, Neither your letter nor your November 28,2018 filings with the Court address 
whether Facebook has taken any steps to mitigate the effects of the DCMS Committee’s seizure 
of Facebook’s allegedly confidential information. Your letter contains a link describing public 
communications between Mr. Richard Allen and Mr. CoWms folUnving the disclosure but does 
not provide any further information regarding any attempts to carry out your obligation under 
Section 16 of the Stipulated Protective Order to “promptly notify in writing the party who caused 


^ Facebook, Inc. is currently tlie subject of inquiries, investigations, or other legal entanglements with the Federal 
Trade Commission, The Federal Bureau of Investigation, The Department of Justice, The Department of Housing 
and Urban Development, The U.S. Senate Commerce Committee, the U.S. Senate Select Committee on Intelligence, 
The U.S. House of Representatives Committee on Energy and Commerce, The European Commissioner for Justice 
and Consumers, The U.K.s Information Commissioner, Ireland’s Data Protection Commissioner, and Australia’s 
Information Commissioner, This list is nowhere near c.Kliaustive. 
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the subpoena or order to issue in the other litigation that some or all of the material covered by 
the subpoena or order is subject to this Stipulated Protective Order.” Did you or your office or 
anyone else for Facebook (including any lawyers it employs in London) take any such mitigating 
steps? Specifically; 

0 Have you provided to the Court and the parties any such exchanges between 
yourselves and Mr. Collins and his Committee as counsel for Plaintiff has done? 

o Has your office provided the parties or the Court with any notices sent to Twitter 
or other online services about the propagation of Facebook’s alleged confidential 
information on their platforms? 

o Has your office taken any steps, regardless of Section 16 of the Protective Order, 
to limit the disclosure of Facebook’s alleged confidential information? 

® If the information is truly “trade secret” and if MP Collins did not act in accord 
with applicable law then his actions must, in your view, violate Facebook 
intellectual property rights; isn’t failure to enforce those rights a knowing waiver 
of them? 

Direct answers to these questions are needed by the Stipulated Protective Order and attempts to 
avoid these issues through rhetoric will certainly not be well taken by us or the Court. 

3. Notwithstanding your denial of Ms. Mehta’s statement at the March 15 Hearing 
that Facebook communicated with Parliament, your alternate theory, that “Facebook 
communicated with the DCMS Committee following Mr. Kramer’s improper disclosure but 
before the DCMS Committee publicized the documents” raises more questions than it answers. 
As both the news article included in your letter and the Declaration of Laura E. Miller of 
November 28, 2018 demonstrate, Facebook has substantial legal resources in the U.K. and in 
areas of U.K. law, including having a Member of the House of Lords (the Hon. Richard Allen) 
on its payroll. Given these resources, why is it that Facebook waited until after Mr. Kramer 
disclosed the documents to communicate with the DCMS Committee? Are you contending that 
in the critical 72-hour timeframe between notification by Mr. Godkin and the actual disclosure, 
your office wrote to the Court to stress that there was an “imminent violation of the protective 
order,” but it did not have the time or will to take action to cooperate with counsel for SixdTluee 
and prevent the disclosure from actually occurring, as it very likely could have? An email 
summarizing Mr. Gordon’s conclusions to counsel for Six4Tlrree would have been a very low- 
cost option to your client and would have likely prevented the ensuing mess. Instead, in your 
sequence of events, your office exercised none of its options to avert the impending tangle. 

4. Your letter does not address the multiple factual inaccuracies made by you and 
your office to the Court summarized in Exhibit F of my previous letter and attached hereto for 
your convenience. We can only assume that you have had time to review this evidence 
thoroughly and discuss it with your client. It remains imperative that you take immediate steps to 
correct these false representations, and it is unfortunate that you have not elected to do so 
already. Our clients will and do otherwise reserve all of their rights and remedies. 
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5. Finally, pursuant to yo.ur invitationj I have reviewed your firm’s submissions to 
the Court dated November 28,2018 once again. I note that the Brief re: Court’s Order Dated 
November 20,2018 insists that an Order to Show Cause be issued, and that Contempt 
Proceedings occur “promptly/’ It is now nearly four months later, and Facebook has taken no 
steps on it alleged continues to drag its feet on a Request for an Order to Show Cause. Why? 

FaCebook can garner far more tluough codpeiation with Mr. Kramer than with 
continuing threats against him. Fsuggested this last December when I first appeared in this case 
on his behalf. 1 am suggesting it again. It seems to me that it would be far more helpful for our 
firm's to cooperate on behalf of our respective clients than to continue contesting the fact that Mr. 
Collins and his Committee used Pafliamentary process against both of oui: clients. Let me laidw 
if you and your client are open to a mdre productive dialogue. 


cc: Cdiinsel of Record via Email 
Enclosure 





“Offending” Summary Compared to Superior Court Public Docket 




Superior Court Public Docket 


“643’s review of Facebook’s initial production 
also clearly reveals the identities of the decision¬ 
makers and rougli timeframes under which the 
decision at die heart of 643’s [Second Amended 
Complaint] was made.... It is abundantly clear 
from Facebook’s production tliat the deceptive, 
anti-competitive and fraudulent scheme alleged by 
643 in its SAC was speaiheaded by Mark 
Zuckerberg (CEO) sometime prior to October 
2012 and involved at least the following 
individuals: Sam Lessin (VP Product 
Management), Chris Cox (Cliief Product Officer), 
Javier Ohvan (VP Growth), Michael Vernal (VP 
Engineering), and Ilya Sukhar (Head of Developer 
Products). ITie decision and its rationale were 
then commimicated to the next layer of 
management, including Douglas Purdy (Director 
of Engineering), Constantin Koiunouzelis 
(Product Manager), Dan Rose (VP Partnerships 
and Platform Marketing), Ime Archibong 
(Director, Strategic Partnerships, Monica Bickert 
(Head of Global Policy Management), Justin 
Osofsky (Director, Platform Operations) and 
others, from late 2012 through the middle of 
2013.” Discovery Proposal Pursuant to Court’s 
December 13,2016 Order, filed January 20,2017, 
at 6-7. 


“Plaintiffs review of Facebook’s files confirms 
this suspicion and reveals abundant evidence 
specifically describing the negotiation of multiple, 
tied contracts (at least one contract to extract 
advertising payments and anotlrer to provide 
special data access). Facebook’s files fuitlrer 
confirm that significant engineering effort and 
capital was deployed in executing these contracts. 
As such, Facebook and its partners are separate 
entities imdertaking acts in concert which caused 
proximate harm to Plaintiff, other companies, and 
the public by actually depriving the marke^lace 
of competition.” Reply to Opposition to Motion to 
Remand, filedFebruary 9,2017, at 9-10 (3:17-cv- 
00359-WHA,N.D. Cal.) 


“ITie evidence submitted by Plaintiff supporting 
these claims consists of a large volume of internal 
discirssions among Facebook employees 
regarding Defendants' motivations for, and 










implementation of, various decisions related to 
access to Facebook’s software APIs, primarily 
from 2012 to 2015, as well as reliance by Plaintiff 
on false representations concerning such access 
and damages suffered by Plaintiff when the 
promised access was elhninated, including 
interference in its contractual and prospective 
relations with customers.” Proposed Order 
Denying Individual Defendants’ Special Motion 
to Strike, filed July 9,2018, at 11. 

“In mid-to-late 2012, the Conspuing Facebook 
Executives began communicating to vaiious 
Facebook employees that data access would be 
severely restricted to many companies that built 
applications related to contacts and calendar 
management, messaging, photo sharing, video 
sharing and streaming, online dating, lifestyle, 
games, news, books, fitness and various utility 
applications.” Fifth Amended Complaint, filed 
January 12,2018 (SAC) % 89 (39:14-18); Fourth 
Amended Complaint, filed November 1,2017 
(4AC)t 83 (30:24-28) 

“Facebook architected its Platform in a manner 
designed to violate user privacy as early as 2009, 
which entailed: (1) separ ating the privacy settings 
for data a user shared with fiiends in apps the user 
downloaded (“user data”) with tire privacy 
settings (“Apps Others Use” settings) for data the 
user shared with fiiends in apps the friends 
downloaded (“friend data”) (Jud. Not. Dec., TI32, 
Ex. 31. Federal Trade Commission Complaint, at 
4-7); (2) hiding the Apps Others Use settings to 
ensure most Facebook users were not aware that 
these settings were distinct from the main privacy 
settings (Id, at 4-9); (3) making the default setting 
for sharing data with Apps Others Use set to “on” 
so Facebook could funnel more data to developers 
under the guise of user consent (Id., at 7-11); and 
(4) deliberately failing to pass privacy settings for 
data transmitted to developers via Facebook’s 
APIs, signaling to developers that all friend data 
was public and could be treated as such.” 
Opposition to Individual Defendants’ Anti- 
SLAPP Motion, filed May 17,2018, at 2-3. 


“Zuckerberg then brought Venial directly into the 
discussions in late 2012 in order to oversee and 
implement the bait and switch plan. Upon 




infoitaation and belief. Vernal planned a public 
announcement of this decision at the end of 2012 
but Zuckerberg prohibited the announcement.” 
SAC 85 (37:14-17). 

“Upon infoimation and belief, starting in mid-to- 
late 2012 and continuing through mid-2013, 
Zuckerberg commrmicated the decision he had 
already made to restrict Graph API data in order 
to restrain competition for Facebook’s new 
products and to prop up Facebook’s new mobile 
advertising business to senior executives on tire 
Platform tea, including Vernal (VP Engineering 
for Platform), Sukhar (Head of Developer 
Products), Doug Purdy (Director of Engineering 
for Platform), Eddie O’Neil (Product Manager for 
Platform), and other senior members of the 
Platform and developer teams. Upon information 
and behef, starting in late 2012 and throughout 
2013, at Zuckerberg’s instruction. Vernal, Sukhar, 
Purdy, O’Neil and others began implementing 
Zuckerberg’s decision to restrict data access for 
anti-competitive reasons rmder the Reciprocity 
Policy framework. Upon information and belief, 
the Platform team, managed by Vernal, was 
worldng on a public aimouncement of tliese 
changes to be released before the end of 2012. 
However, the changed were not pubhcly 
disclosed.” SAC ^ 214 (76:1-12); 4AC ^ 208 
(66:10-21). 

“The Conspiring Facebook Executives made 
various layers of management aware of this 
decision on a need-to-know basis periodically 
from late 2012 imtil late 2013 and, at all times, 
required such employees to actively conceal 
and/or make only partial disclosures of these 
material facts.” 4AC f 106 (40:24-27). 

“The Platform team, managed by Vernal, was 
working on a public announcement of these 
changes to be released before the end of 2012. 
However, Zuckerberg dir ected Vernal not to 
disclose these changes but to instead extract 
payments from Developers upon threat of being 
shut down from the public Platform APIs. In other 
words, Zuckerberg directed Vernal to privately 
and secretly errforce these changes while 
continuing to nrislead the general pubhc and 
Developers, including Styleform.” Styleform 



Complaint, filed November 2,2018 (SC)^ 17 
(7:13-18). 

“Instead, Facebook noted in its public 
announcement only that some ‘rarely used’ APIs 
would be shut down. This statement was false, 
and Defendants knew it to be false at the time 
they made it. In fact, the endpoints shut down on 
April 30,2015 (the very same ones Zuckerberg 
secretly restricted in October and November 
2012) were the most widely used APIs in 
Facebook Platform.” SC f 163 (64:3-7). 


“In the summer and fall of 2012, Lessin worked 
with Zuckerberg and other Facebook executives 
like Sheryl Sandberg, Andrew Bosworth and Dan 
Rose to weaponize developers’ reliance on 
Facebook Platform by threatening to break many 
software applications imless the developer made 
significant pmchases in mnelated advertising 
using Facebook’s new mobile advertising product. 
Upon information and belief, Lessin was 
instrumental in developing the plan whereby 
Facebook approached companies to buy 
advertising under the threat that if they did not do 
so, Facebook would break their applications by 
removing access to public Platform data.” SAC f 
26(13:18-25). 

“This reference to Facebook as a ‘monopolist’ and 
as ‘monopolizing for itself is not sufficient to 
make any reasonable determination as to whether 
Facebook’s conduct was unilateral or in conceit 
with other partners with which it executed binding 
agreements to extract large advertising payments 
in exchange for tiieir continued access to ^ta that 
had been shut off to all other companies, thereby 
giving these partners an insurmountable 
competitive advantage in various software 
markets.” Reply to Opposition to Motion to 
Remand, filed February 9,2017, at 2 (3:17-cv- 
00359-WHA,N.D.Cal.) 

“Further, Zuckerberg’s bait and switch scheme 
violates the Cartwright Act as Facebook 
maliciously tied its Platform APIs (the tying 
product) to its Neko advertising product (the tied 
product), which are entirely unrelated and distinct 
products. Facebook reftised to offer the Platform 
APIs unless companies purchased Neko 
advertising. Facebook had sufficient economic 






power in the market for Platform APIs (it was the 
sole provider of these APIs) to coerce companies 
into pmchasing Neko advertising, and the tying 
arrangement prohibited an estimated 40,000 
companies fiom purchasing advertising (the tied 
product) as they no longer had products to 
advertise. CACI (2017) (Bus. & Prof. Code, § 
16727)...” Opposition to Individual Defendants’ 
Anti-SLAPP Motion, filed May 17,2018, at 13- 
14, fit. 25. 


“Upon information and belief, Facebook at no 
time provided access to the Graph API on an 
equal basis, but rather offered large companies 
unfair competitive advantages and special access 
to data in exchange for unrelated advertising 
purchases or other in-kind consideration at the 
expense of small or new companies attempting to 
compete in Facebook’s operating system.” SAC f 
2(3:5-8);4ACTI2(3:4-7). 

“Upon information and belief, many Developers 
with close relationships to Facebook and who paid 
substantial smns of cash or other financial 
consideration continue to access this data in some 
form, notwithstanding that it has been restricted to 
all other software companies.” SAC f 101 (45:3- 
6 ). 

“Upon information and belief, working in concert 
with other Facebook executives and employees 
and other large companies that were close 
partners, Zuckerberg implemented a plan to deny 
access to many applications on Facebook 
Platform on the primary or exclusive basis that 
these applications were competitive with current 
or fiiture products offered by Facebook or 
Facebook’s close partners. Upon information and 
belief. Defendants’ anti-competitive conduct was 
imdcrtaken in concert with other large companies 
to oligopolize various software markets that 
Defendants continued to represent would operate 
on fair and equal terms.” 4AC % 4 (3:24-4:4). 

“Tinder, along with a number of other companies 
that rely upon photo or friend information from 
Facebook and executed wliitelist agreements 
imder Facebook’s ‘reciprocity principle,’ are 
competitors of Plaintiff. It is entirely plausible 
that Facebook and each of these entities constitute 




a tnist under the Cartwright Act as tltey engaged 
in ‘a combination of capital, skill, or acts by two 
or more persons to achieve an anticompetitive 
end.’ The anticompetitive ends encompass 
restrictions in trade or commerce, the reduced 
production of a commodity and contracts to 
preclude free competition, and the combination of 
interests in connection with a sale of advertising. 
For instance, the mmiber and kinds of software 
applications from which consumers could choose 
decreased precipitously once Facebook shut down 
access to its data. Consumers were forced to 
choose from a much smaller pool of apphcations 
- those developed exclusively by Facebook or 
companies from which Facebook could extract 
large advertising payments.” Reply to Opposition 
to Motion to Remand, filed Febmaiy 9,2017, at 
14 (3:17-cv-00359-WHA, N.D. Cal.) 


“At Zuckerberg’s personal direction, Facebook 
used its platform as a weapon to gain leverage 
against competitors in a host of ways, threatening 
to shut down access to publicly available data to 
any company tliat crossed Facebook’s radar- in a 
wide range of circirmstances, including tlireats to 
shut down data access; unless the company sold to 
Facebook for a pitrchase price below their fair 
market value; iMess the company purchased large 
amoimts of unrelated advertising witlr Facebook; 
urrless the company transferred intellectual 
property to Facebook; or unless the company fed 
all of its data back to Facebook, where it would 
then be available to the con^any’s competitors, 
placing the company’s business at great risk.” 

SAC H 3 (3:9-17). 4AC T| 3 (3:8-16). 


“Beginning in 2012 and continuing imtil 2015, at 
Zuckerberg’s personal direction, Facebook 
executives irrstnicted their subordinates to identify 
categories of applications that would be 
corrsidered competitive and to develop a plan to 
remove access to critical data necessary for those 
apphcations to function, thereby eliminating 
competition across entire categories of software 
apphcations....” SAC 17 (5:3-7); 4AC % 1 (4:27- 
5:3). 


“Zuckerberg held discussions with Defendants 
Cox, Ohvan, and Lessin (m addition to other 
Facebook executives like Sheryl Sandberg, Daniel 





Rose, and Andrew Bosworth) where Ziickerberg 
communicated his decision to shut down access to 
Graph API data to applications that were 
competitive with ciuxent Facebook products and 
with products Facebook may choose to laimch in 
the ftitine, even if Facebook had not begim 
working on such products.” SAC f 85 (37:6-12); 
4AC H 79 (29:14-19). 

“Once Zuckerberg decided to remove tlie Graph 
API Data to competitors, Zuckerberg personally 
maintained an ever-growing list of competitors 
that only he could authorize blacklisting from the 
Graph API Data. Upon information and belief, 
once a Developer was blacklisted from the Graph 
API Data, any applications the Developer built 
could no longer use any of the blacklisted data 
that Facebook purportedly provided publicly on 
fair and neutral terms to all Developers. Upon 
information and belief, blacklisted data often 
included the Graph API data, including the full 
fiiends list, friends pennissions andnewsfeed 
APIs - data types that were among the most 
popular on Facebook Platform and upon which 
643’s business and many other businesses 
depended.” SAC 211 (74:7-15). 

Numerous examples of Facebook enticing 
companies to build their products in reliance on 
the Graph API, reinforcing Facebook’s false 
representations that Graph API is freely and 
equally available to all companies. SAC 114- 
122; 4AC Til 110-117. 


“Decisions were made not unilaterally but in 
combination and concert with other large 
companies and exceptions were made for certain 
applications that are more susceptible to violating 
user trust or where user tinst is in fact more 
important than in normal applications, such as 
apphcations that require payments. These 
exceptions demonstrate that user trust could not 
have been the actual reason for Facebook’s 
decision to restrict Graph API data.” SAC f 128 
(56:18-23); 4AC1122 (47:15-20). 

“Upon information and belief, many Developers 
with close relationships to Facebook and who paid 
substantial sums of cash or other financial 
consideration continue to access this data in some 
form, notwithstanding that it has been restricted to 







all other software companies.” SAC f 101 (45:3- 

6 ). 

“Facebook reached an unspecified compromise 
with dating app Tinder that permitted some form 
of access to photos of mutual fiiends. Upon 
information and belief. Tinder provided highly 
valuable unrelated financial consideration to 
Facebook in exchange for this special access to 
data.” SAC 1(66:4-7. 

“However, Facebook at no time provided access 
to the Graph API on an equal basis, but rather 
offered large Developers unfair competitive 
advantages and special access to data in repeated 
violation of user privacy and its public 
commitment to a level competitive playing field, 
in exchange for imrelated advertising pinchases or 
other in-kind consideration at the expense of small 
or new Developers, like Styleform, that were 
attempting to compete in the Facebook Platform.” 
sens (5:16-21) 

Referring to current Facebook policies that 
demonstrate Facebook still does not enforce its 
policies for select partners: “Only use friend data 
(including friends list) in the person’s experience 
in your app. (See 

developers.facebooLcom/policy, Section 3.3). 
This demonstrates that some Developers who 
have entered into special agreements with 
Facebook stiU have access to this social data 
notwithstanding that the data has been restricted 
to all other Developers. Certain large Developers 
with close relationships to Facebook and who paid 
Facebook substantial smns of cash or oflier 
financial consideration continue to have access to 
this data in some form, notwithstanding that it has 
been restricted to at least 35,000 other 
Developers.” SC 152 (21:27-22:6). 

Referring to more than 5,000 special agreements, 
which qualifies as “numerous instances”. SC If 68 
(26:25-26). 


“From 2007 through at least 2015, Facebook 
willfully, intentionally, recklessly, maliciously 
and ne^gently failed to pass privacy or age 
information when sending Developers Graph API 
Data. This required Developers, including 643, to 
incur enonnous costs in order to comply wifli user 






privacy settings and age restrictions. Facebook 
made repeated public disclosmes that withheld 
this fact.” SAC H 232 (84:1-5); 4AC f 226 (73:16- 
20 ). 

“Zuckerberg tasked Sukhar and Vernal with 
developing a plan to communicate and mask this 
firaudident scheme to Facebook employees and, 
eventually, Developers and the public.” SAC 88 
(39:4-5); 4AC H 82 (30:14-15). 

“Further, employees were livid by the scheme 
when they foimd out in late 2013 and 2014 and 
many left the company. Before leaving, these 
employees noted that Facebook was deliberately 
hying to place the blame on imspecified bad actor 
Developers for Facebook’s own anti-competitive 
and privacy-violating conduct and that Facebook 
was succeeding in doing so.” SC ^ 26 (10:16-19). 

“Contrary to its public representations, when 
Facebook restricted the Graph API in 2015, it did 
not do so for the purpose of enhancing user 
privacy. Rather, Facebook had previously hid its 
privacy controls and set the default sharing setting 
to ‘on’ in violation of the FTC Order in order to 
ftumel more data to Developers that agreed to 
Facebook’s extortion scheme that tied Platform 
API access to unrelated purchases in Facebook’s 
mobile advertising products. Facebook could have 
complied with the FTC Order, in 2012, by: (1) not 
hiding the ‘Apps Odiers Use’ privacy page; (2) 
turning the default setting to ‘off; and (3) by 
passing privacy information along with the data it 
sent through its APIs, an issue reported by 
Facebook employees for many years and which 
management wUlfidly and deliberately decided 
not to fix in violation of the FTC Order. Instead, 
Facebook ejq)anded the very violations at the 
center of the FTC’s complaint leading up to the 
FTC Order for the purpose of improperly 
oligopolizing for itself and other large Developers 
various attractive software markets.” SC f 116 
(47:7-18). 

“Facebook arcliitected its Platfonn in a manner 
designed to violate user privacy as early as 2009, 
which entailed: (1) separating the privacy settings 
for data a user shared with fiiends in apps the user 
downloaded (“user data”) with the privacy 
settings (“Apps Others Use” settings) for data the 





user shared with friends in apps the friends 
downloaded (“friend data”) (Jud. Not. Dec., 132, 
Ex. 31. Federal Trade Commission Complaint, at 
4-7); (2) hiding the Apps Others Use settings to 
ensure most Facebook users were not aware that 
these settings were distinct from the main privacy 
settings {Id., at 4-9); (3) making the default setting 
for sharing data with Apps Others Use set to “on” 
so Facebook could funnel more data to developers 
under the guise of user consent {Id., at 7-11); and 
(4) deliberately failing to pass privacy settings for 
data transmitted to developers via Facebook’s 
APIs, signaling to developers that all friend data 
was public and could be treated as such.” 
Opposition to Individual Defendants’ Anti- 
SLAPP Motion, filed May 17, 2018, at 2-3. 

“By way of example, if User A uploaded a photo 
to Facebook and set the photo to ‘only me,’ only 
User A would be able to see the photo on 
Facebook.com or in the Facebook mobile app. 
However, because the Apps Others Use setting 
was hidden, not explained to users, and had the 
default set to ‘on’ (issues the FTC had identified 
in its Complaint and Order), this meant that when 
User B used a Developer’s app. User B would be 
able to see User’s A photo that was set to “only 
me” if User B was friends with User A. This is 
because Facebook did not pass the privacy 
settings of a data object in the most widely used 
Graph API endpoints, and because Facebook had 
‘auto-consented’ User A to share this data in Apps 
Others Use without revealing this fact to User A. 
User B sees the photo and tells User A, and User 
A complains that the Developer is violating their 
privacy when in fact it was Facebook. The 
Developer could not have even loiown that User B 
was not supposed to see User A’s photo since 
Facebook falsely represented it handled such 
settings prior to sending the photo to the 
Developer.” SC U 113 (46:5-16) 


“Zuckerberg’s scheme made it impossible for 
Plaintiffs business and thousands of other 
businesses to succeed on Facebook Platform and 
directly resulted in the widely reported scandal in 
which a developer, Cambridge Analytica, used 
Facebook data to influence the 2016 Presidential 
election....” Opposition to Individual Defendants’ 
Anti-SLAPP Motion, filed May 17, 2018, at 3-4. 




“643 could not have known that Zuckerberg had 
aheady decided to restrict access to the data 
necessary for 643’s technology to work, as 
Facebook had exclusive access to this information 
and had taken measures to actively conceal this 
fact from 643, other Developers, and the public.” 
SAC f 103 (45:26-46:2); 4AC ^ 97 (37:3-6). 

“Facebook held niunerous meetups, conferences, 
hackathons and the like in which Facebook 
employees trained developers like 643 to access 
data the conspuing Facebook Executives had 
already made the decision to restrict, encoinaging 
and enticing Developers to invest time, money 
and resources in applications Facebook knew 
would not fimction based on decisions Zuckerberg 
had already made.” SAC H114 (50:5-9); 4AC ^ 
108(41:7-11). 

“Facebook’s public disclosme diat it made these 
changes out of respect for user privacy is 
imdermined by numerous Facebook projects that 
deliberately, will&lly, intentionally, recklessly 
and negUgently violated privacy by only making 
partial disclosines to Developers regarding how 
Facebook collected, stored, and transmitted user 
data. Upon information and belief, beginning at 
least by 2012, Olivan directed a range of projects 
under the supervision and direction of 
Zuckerberg, Cox and Lessin that deliberately, 
intentionally, maliciously, recklessly and 
negligently violated user privacy in order to 
effectuate Facebook’s anti-competitive scheme of 
baiting companies to rely on Facebook Platform.” 
SAC *1226 (80:25-81:6); 4AC f 220 (70:25-71:5). 

Numerous examples of Facebook enticing 
companies to build their products in reliance on 
the Graph API instead of taking measures to make 
a full pubhc disclosure around its treatment of 
user and friend data. SAC 114-122; 4AC *1^ 
110-117. 

“Zuckerberg’s scheme made it impossible for 
Plaintiff’s business and thousands of other 
businesses to succeed on Facebook Platform and 
directly resulted in the widely reported scandal in 
which a developer, Cambridge Analytica, used 
Facebook data to influence the 2016 Presidential 
election....” Opposition to Individual Defendants’ 
Anti-SLAPP Motion, filed May 17,2018, at 3-4. 




“Around the time Zuckerberg made this decision 
to engage in the alleged fiaudident and anti¬ 
competitive schemes, Facebook’s stock price had 
dropped by more than half from its initial IPO in 
May 2012, reaching a low of $37 billion in 
September 2012. Zuckerberg personally lost 
approximately $10 billion in the period during 
which he decided to implement the fraudulent and 
anti-competitive schemes.” SAC ^ 14 (7:20-24); 
4ACf 14(7:14-18). 

“Around the time Zuckerberg made the decision 
to implement Facebook’s anti-competitive scheme 
in 2012, Facebook was experiencing substantial 
difSculty transitioning its service from desktop 
computers to mobile devices. The executive team 
was extremely concerned around the impact this 
transition wo^d have on Facebook’s revenues, 
particularly in light of tire fact that Facebook was 
planning an initial public offering (IPO) of its 
shares around this time.” SAC If 29S (97:19-24); 
4ACT1279 (84; 12-17). 

“Zuckerberg’s motivations for his decision to 
create a Reciprocity Policy and shut down public 
access to Graph API were two-fold: (1) restrain 
competition in a wide range of software markets 
to make room for new products from Facebook 
and its close partners; and (2) shut down all 
mechanisms for apps to grow organically in order 
to force apps to prop up Facebook’s new mobile 
advertising business or else Facebook would shut 
them down. The first motivation helped ensure 
fliat no new competitive threat could ever become 
as big as Facebook; the second motivation 
ensrtred that Facebook could make the transition 
from desktop to mobile without experiencing a 
significant drop in revenues in order to turn 
around the rmderperforming brtsiness.” SAC Tf 209 
(73:5-13); 4AC If 203 (63:18-26). 

“At least by 2012, Zuckerberg personally 
oversaw a practice to weaponize Platform APIs, 
including a wide range of user and friend data, 
by inducing companies to rely on this data and 
then threatening to remove access imless these 
companies made exorbitant purchases in 
Facebook’s nascent mobile advertising product, 
known internally as ‘Neko’ ads and publicly as 





“Mobile App Install” ads. Zuckerberg 
blacklisted any companies that refused to buy 
these Neko ads in exchange for continued access 
to data that Facebook claimed for years was 
publicly available at no charge. This blacklisting 
practice also applied to companies that 
Zuckerberg in his sole discretion considered 
competitive with current or future Facebook 
products, even products Facebook had not yet 
built, and notwithstanding that most of these 
developers operated entirely within Facebook’s 
rules. 

Zuckerberg’s decision to weaponize a 
platform economy that Facebook represented for 
years as open, fair and neutral stemmed fi-om a 
simple fact that by 2012 had devastating 
consequences for Facebook; people began 
accessing the Internet pilmarily fi'om their 
phones, but Facebook had built its advertising 
business for desktop computers, which caused 
Facebook’s revenues and stock price to 
plummet. Facebook lost over $200 million in the 
second and third quarters of 2012 because it had 
no mobile advertising business. By mid-2012, 
Facebook’s most senior executives explored 
ways to leverage the fact that hundreds of 
thousands of companies relied on Facebook 
Platform in order to reboot its business for 
smartphones, presenting various options for 
restricting public Platform APIs to its Board of 
Directors in August 2012, including; [redacted]. 
In November 2012, after many months of 
discussion, Zuckerberg made his final decision 
to implement a version of the reciprocity policy 
called 'full reciprocity,’ instead of implementing 
a public pricing program like Twitter or a 
revenue share model like the neutral platforms 
operated by Apple and Google - the top Platform 
executive. Vernal, referred to this decision as 
[redacted] outside Zuckerberg’s presence. 
Zuckerberg’s full reciprocity policy caused 
Facebook’s privacy and policy apparatus to 
disintegrate in favor of an arbitrary enforcement 
enviromnent in which Facebook offered user 
data, and in particular friend data, to certain 
developers that were willing to reciprocate with 
Facebook, typically by agreeing to purchase no 
less than $250,000 per year in unrelated Neko 
ads, while other developers that Facebook 
considered competitive were blacklisted from 



accessing this data even though they never broke 
any inles or violated anyone’s privacy. 

[redacted]. Facebookpublicly announced 
an intentionally vague reciprocity policy in 
January 2013 that refused to de^e a 
‘competitive’ service or ‘core functionality’ in 
order to mislead companies into diinking that 
only online social networks (e.g. MySpace, 
Lmikedln) would be considered competitive; but 
Facebook’s internal definition of a competitive 
service included virtually every kind of 
consumer application, including those Facebook 
explicitly induced in its reciprocity 
announcement to continue using APIs it had 
already decided to shut down. This enabled 
Facebook to use its policies as an excuse to 
eliminate any developer for any reason 
whatsoever.... 

The ‘fill! reciprocity’ policy was 
unworkable as an actual policy but was 
extremely effective as a ‘get out of jail fiee’ card 
by giving Facebook: (1) an excuse to threaten to 
or actually shut down certain developers unless 
tliey purchased mobile ads or provided other 
consideration Facebook deemed valuable in its 
sole discretion; (2) the ability to blame 
developers for privacy violations related to data 
Facebook chose to fumiel to developers without 
any privacy controls; and (3) cover to continue 
to induce developers to rely on the very APIs 
Zuckerberg had decided to privatize in 2012 in 
order to gain more leverage. Under cover of the 
fill! reciprocity policy, the Growth team (Olivan) 
illegally accessed non-public information about 
competitive applications in order to monitor 
their popularity and then directed the Platform 
team (Vernal) to shut down an application once 
it became widely used. By early 2013, armed 
with an official reciprocity policy vague enough 
for Zuckerberg to consider any company a 
criminal, the initial pay-to-play tests began 
paying off as Neko ads grew faster than 
anyone’s wildest expectations.” Opposition to 
Individual Defendants’ Anti-SLAPP Motion, 
filed May 17,2018, at 4-8. 


“Zuckerberg and the Conspiring Facebook 
executives requested that Facebook employees 
actively conceal the decision to restrict data 
access to competitors from intenial employees. 




Developers, and the public. Upon mfoimation and 
belief, &e Conspiring Facebook Executives made 
various layers of management aware of this 
decision on a need-to-know basis periodically 
from late 2012 until late 2013 and, at all times, 
required such employees to actively conceal 
and/or make only partial disclosures of these 
material facts.” SAC If 112 (49:20-26); 4AC % 106 
(40:21-27). 

“Zuckerberg tasked Sukhar and Vernal, among 
others, with propagating this fraudulent narrative 
internally to Facebook employees and externally 
to Developers and the pubhc. Upon information 
and belief Sukhar, Vernal, and die other 
Conspiring Facebook Executives actively 
participated and conspired in the propagation of 
this fraudulent narrative.” SAC f 127 (S6:6-10); 
4ACt 121 (47:3-7). 

“Beginning in 2013 and coalescing around 
Febniary 2014, Zuckerberg concocted and 
disseminated a completely fabricated narrative to 
mask the deceptive and anti-competitive schemes 
that Zuckerberg and the other Facebook 
executives had decided upon and began 
implementing in 2012. This fabricated narrative 
centered on the fact that the data being shut off to 
tens of thousands of smaller software companies 
was rarely used and/or violated user trust and 
control over their data.... These fabricated reasons 
for shutting off data critical to the functioning of 
tens of thousands of applications played no role in 
the actual decisions made by Zuckerberg and 
ratified and implemented by ottier Facebook 
executives.” SAC 10 (6:11-16); 4AC ^ 10 (6:6- 
14). 


“From late 2013 through early 2014, Zuckerberg 
worked witli the Conspiring Facebook Executives 
and otlier companies to construct a fraudulent 
narrative around ‘user trust’ designed to mask the 
true reasons he decided to close access to 
Facebook’s allegedly Open Graph. Upon 
information and belief Zuckerberg personally 
decided to atmormce the closing of Graph API at 
F8 on April 30,2014 and personally drafted his 
speech that actively, maliciously and fraudulently 
suppressed materi^ information and revealed only 
partial information.” SAC f 124 (SS:16-22); 4AC 
f 118 (46:14-20). 





“Facebook concealed the anti-competitive Graph 
API Data restrictions behind a revamp of its 
Login product in order to cloak these changes 
under a narrative about user control and privacy.” 
SAC 224 (80:10-12); 4AC1218 (70:9-11). 

“Zuckerberg, Vernal and Facebook Director of 
Engineering Doug Purdy, aggressively sought to 
make Defendant Sukhar the front man externally 
for this bait and switch scheme, which Srikhar 
resisted until late 2013 because he knew the 
conduct was wrong and malicious. However, in 
late 2013, Sukhar conceded and from that time on 
actively ratified, acquiesced in and advanced key 
components necessary to the implementation of 
the fraudulent and anti-competitive scheme in 
2014 and 2015.” SAC f 85 (38:4-9). 


“Zuckerberg’s statement and Facebook’s 
subsequent amiouncement that certain endpoints 
would be removed because they were rarely used 
was false, and the Conspiring Facebook 
Executives knew them to be false at the time they 
made them. Upon information and belief, certain 
of the endpoints in question were among the most 
used data in Graph API.” SAC 1137 (59:9-12); 
4ACTJ131 (50:3-6). 

“Graph API explicitly removed endpoints fliat 
were of high value to Developers, like die ability 
to access photos, which for years Facebook had 
touted as one of its most valuable and highly 
trafficked features in order to entice developers to 
build applications. Facebook’s only justification 
for removing access to photos at that time was 
that this endpoint was ‘rarely used’, which 
contravenes every public statement Facebook had 
previously stated for over seven years in which 
Photos were consistently touted as its #1 
application and driver of user engagement.” SAC 
1139 (60:1-7); 4AC ^ 133 (50:21-27). 

“Instead, Facebook noted in its public 
announcement only that some ‘rarely used’ APIs 
would be shut down. This statement was false, 
and Defendants knew it to be false at the time 
they made it. In fact, the endpoints shut down on 
April 30,2015 (the very same ones Zuckerberg 
secretly restricted in October and November 





2012) were the most widely used APIs in 
Facebook Platform.” SC f 163 (64:3-7). 

“Once Zuckerberg decided to remove the Graph 
API Data to competitors, Zuckerberg personally 
maintained an ever-growing list of competitors 
that only he could authorize blacklisting from the 
Graph API Data. Upon information and belief, 
once a Developer was blacklisted from the Graph 
API Data, any applications the Developer built 
could no longer use any of the blacklisted data 
that Facebook purportedly provided publicly on 
fair and neutral terms to all Developers. Upon 
information and belief, blacklisted data often 
included the Graph API data, including the full 
friends list, friends permissions and newsfeed 
APIs - data types that were among the most 
popular on Facebook Platform and upon which 
643’s business and many other businesses 
depeirded.” SAC f 211 (74:7-15); 4AC If 205 
(64:19-27). 

“The evidence submitted by Plaintiff supporting 
tlrese claims consists of a large volume of internal 
discussions among Facebook employees 
regarding Defendants' motivations for, and 
implementation of, various decisions related to 
access to Facebook’s software APIs, primarily 
from 2012 to 2015, as well as reliance by Pla^tiff 
on false representations concerning such access 
and damages suffered by Plaintiff when the 
promised access was eliminated, including 
interference in its contractual and prospective 
relations with customers.” Proposed Order 
Denying Individual Defendants’ Special Motion 
to Strike, filed July 9,2018, at 11. 


“Facebook’s pubhc disclosure that it made these 
changes out of respect for user privacy is 
unde rmin ed by numeroits Facebook projects that 
deliberately, willfully, intentionally, recklessly 
and negligently violated privacy by only making 
partial disclosures to Developers regartog how 
Facebook collected, stored, and transmitted user 
data. Upon information and belief, begiiming at 
least by 2012, Olivan directed a range of projects 
imder the supervision and direction of 
Zuckerberg, Cox and Lessin that deliberately, 
intentionally, maliciously, recklessly and 
negligently violated user privacy in order to 
effectuate Facebook’s anti-competitive scheme of 




baiting companies to rely on Facebook Platform.” 
SAC 1226 (80:25-81:6); 4ACi| 220 (70:25-71:5). 

“The FTC Order provided, among other thhigs, 
that Facebook and its representatives “shall not 
misrepresent in any maimer, expressly or by 
implication, the extent to which it maintains the 
privacy or security of covered uiformation. The 
FTC Order defined “covered uiformation” to 
include an individual consumer’s photos, among 
other things. The FTC Order also provided that 
Facebook and its representatives “shall not 
misrepresent in any manner, expressly or by 
imphcation.. .the extent to which [Facebook] 
m^es or has made covered information 
accessible to third parties.” SAC 82-84 (36:15- 
25); 4AC 76-78 (29:3-10). 

“The conduct of Zuckerberg and the Conspiring 
Facebook Executives was wrongful on a number 
of independent grounds, including violation of 
California’s Unfair Competition law (including 
violation of the FTC Order), and the common law 
causes of action for intentional misrepresentation, 
negligent misrepresentation, and concealment.” 
SAC 1297 (99:10-13); 4AC ^ 281 (86:1-4). 

List of almost a dozen privacy-violating projects. 
SAC 227-233; 4AC tif 220-227. 


“Facebook directed a project to collect certam 
data firom consumers who had downloaded the 
Onavo app, a virtual private network app 
downloaded by approximately 30 million people, 
which Facebook purchased in October 2013. 

Upon information and belief, before the WSJ 
article, Facebook failed to disclose that it used 
Onavo data to measure what people do on their 
phones beyond Facebook’s own suite of apps, 
including detailed information on things such as 
which apps people generally are using, how 
fi:equently, for how long, and whether more 
women tlian men use an app in a specific 
counhy.... Facebook failed to disclose that it used 
this data for competitive intelligence of numerous 
apps.... Facebook’s decision to purchase a large 
competitive application (WhatsApp) was heavily 
influenced by Facebook’s ability to obtain this 
non-public information fl:om Onavo... Had 
Facebook fully disclosed this deceptive practice 
publiclv to users and Developers when it made 




public disclosures regarding its purchase of 
Onavo and its update to Onavo’s Terms of 
Service, then 643 would not have invested in or 
continued to invest in building its business.” 5AC 
TI227 (81:21-82:11); 4AC If 221 (71:21-72:9). 

“Olivan accomplished this by monitoring apps 
installed on the phones of 30 milhon people who 
had installed Onavo, a virtual private network app 
that Facebook bou^t in 2013; Olivan was able to 
track highly sensitive information about at least 
82,000 software applications as a result of 
violating the privacy of these 30 million people.” 
Opposition to Individual Defendants’ Anti- 
SLAPP Motion, filed May 17,2018, at 8, fii. 15. 


“At least by 2012 or 2013, Facebook collected 
various content and metadata regarding 
communications on Android Phones without fully 
disclosing fliis to Facebook’s users.” SAC f 228 
(82:12-14); 4AC If 222 (72:10-12). 

“At least by 2013 and continuing at least through 
2015, Facebook continued to explore and 
implement ways to track users’ location, to track 
and read their texts, to access and record their 
microphones on tiieir phones, to track and monitor 
their usage of competitive apps on their phones, 
and to track and monitor their calls. For example, 
upon information and belief, Facebook expanded 
its program to access and monitor the microphone 
on Android phones in 2015 without securing the 
explicit consent of all users and while only 
providing partial disclosures as to what 
information was being obtained and for what 
purposes it was being used.” 5AC *1233 (84:10- 
17); 4AC f 227 (73:23-74:2). 


“Facebook deliberately ignored the privacy 
settings of a Facebook user’s fiiend list in order to 
improve a certain prominent feature in the 
Facebook app and website. Upon information and 
beUef, Facebook made partial public disclosures 
of this practice while withholding material facts 
that, if disclosed, would have materially qualified 
Facebook’s public statement.” 5AC ^ 229 (83:1- 
6); 4AC f 223 (72:24-28) (refers directly to an 
article discussing the People You May Know 
featiue: https://gizmodo.com/facebook-figured- 
out-my-family-secrets-and-it-wont-tel- 
1797696163) 






“In 2013 and 2014 Facebook deliberately 
implemented code to have a user’s privacy setting 
lapse after a period of time, requiring the user to 
go through additional effort in order to have the 
user’s privacy settings respected. Facebook made 
partial disclosures aroimd this time regarding 
privacy settings, but did not fully disclose that it 
had caused certain settings to lapse after a period 
of time. Upon information and behef, at all times, 
the employees involved in this project were acting 
under the direction and approval of Zuckerberg, 
Cox, Lessin and Ohvan.’’ SAC ^231 (83:18-24); 
4AC % 225 (73:9-15); see also SAC f 226; 4AC % 
220 (Zuckerberg directly overseeing all of these 
privacy-violating requests) 


“By way of example, if User A uploaded a photo 
to Facebook and set the photo to ‘only me,’ only 
User A would be able to see the photo on 
Facebook.com or in the Facebook mobile app. 
However, because tlie Apps Others Use setting 
was hidden, not explained to users, and had the 
default set to ‘on’ (issues the FTC had identified 
in its Complaint and Order), this meant that when 
User B used a Developer’s app, User B would be 
able to see User’s A photo that was set to “only 
me” if User B was fiiends with User A. This is 
because Facebook did not pass the privacy 
settings of a data object in the most widely used 
Graph API endpoints, and because Facebook had 
‘auto-consented’ User A to share this data in Apps 
Others Use without revealing this fact to User A. 
User B sees the photo and tells User A, and User 
A complains that the Developer is violating then- 
privacy when in fact it was Facebook. The 
Developer could not have even known that User B 
was not supposed to see User A’s photo since 
Facebook falsely represented it handled such 
settings prior to sending the photo to tlie 
Developer.” SC f 113 (46:5-16) 






